let this be a reminder that little snitch has existed for a long time and we all should be using it in prompt-for-everything mode.

there are multiple implementations for macos. there are multiple implementations for linux. run, don’t walk.

yes, there are tradeoffs. you may even changes your web browsing habits to avoid a tirade of prompts from some random chum bucket. it’s all worth it when one of your eyebrows goes up after some process that tries to make a dns request it doesn’t have any business making. then you hit deny. then you investigate.

now all we need is little snitch for filesystems. maybe we can build it on encrypted fuse mounts.